STIGQter: STIG Summary: Oracle Linux 6 Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

The system clock must be synchronized continuously, or at least daily.

DISA Rule

SV-219562r603263_rule

Vulnerability Number

V-219562

Group Title

SRG-OS-000355

Rule Version

OL6-00-000247

Severity

CAT II

CCI(s)

• CCI-001891 - The information system compares internal information system clocks on an organization-defined frequency with an organization-defined authoritative time source.

Weight

10

Fix Recommendation

The "ntpd" service can be enabled with the following command:

# chkconfig ntpd on
# service ntpd start

Check Contents

Run the following command to determine the current status of the "ntpd" service:

# service ntpd status

If the service is enabled, it should return the following:

ntpd is running...

If the service is not running, this is a finding.

Vulnerability Number

V-219562

Documentable

False

Rule Version

OL6-00-000247

Severity Override Guidance

Run the following command to determine the current status of the "ntpd" service:

# service ntpd status

If the service is enabled, it should return the following:

ntpd is running...

If the service is not running, this is a finding.

Check Content Reference

M

Target Key

2928

Comments